A system of memory protection in which segments of memory are assigned identification numbers (the locks) and authorized users are provided the numbers (the keys) by the operating system. This provision is done by a privileged process in some location, such as a program status word, not accessible to the user.